Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
File: HgqTik3H07rU9fll3NVeCymMQts.mft (raw, json)
Hash identifier: nreNuQIV1dA7FKAyF0ODDYzj0mhbiY08oQYExYMFQFI=
Subject key identifier: 73:B3:E8:6F:E8:B7:DB:71:9A:CB:C4:51:66:E8:C4:F3:49:B8:DB:72
Authority key identifier: 1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
Certificate issuer: /CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Certificate serial: 0DBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
Manifest number: 0DB4
Signing time: Fri 31 Jan 2025 17:53:40 +0000
Manifest this update: Fri 31 Jan 2025 17:53:39 +0000
Manifest next update: Fri 07 Feb 2025 17:53:39 +0000
Files and hashes: 1: HgqTik3H07rU9fll3NVeCymMQts.crl (hash: GfStu50s/q6PMX4kTCElN06d5xYvLOmP26qEe3oBMkA=)
2: 7592203EB1B111E999187E66C4F9AE02.roa (hash: s8Tfq8O3npvmSnrIe4pOAYPUbkHMr5QUW6XBOTRm31w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3519 (0xdbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Validity
Not Before: Jan 31 17:53:39 2025 GMT
Not After : Feb 7 17:53:39 2025 GMT
Subject: CN=679d0e24-4c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:65:a2:1e:b8:9d:90:3b:cf:5a:cf:ec:98:a3:
10:3d:67:2b:db:73:63:b9:de:89:dd:bf:b9:05:61:
68:72:a4:9d:ee:bb:1d:36:c3:74:d7:83:ec:bc:e4:
80:a2:0e:6c:43:65:c1:93:2a:c0:43:d2:1d:55:af:
8e:a7:11:61:53:19:96:35:79:dd:f0:53:d5:0f:e5:
83:e1:32:a4:72:48:59:3b:97:17:b7:d5:44:18:d5:
d2:e0:33:0b:fe:f9:74:d4:12:07:8f:c1:91:84:4e:
00:a7:a7:fa:fa:34:c7:ac:2a:ff:62:3a:f9:78:d5:
a6:39:97:2d:3a:01:7b:06:01:7e:ac:63:64:b0:3f:
fb:74:3b:9d:9b:82:ec:a3:9d:74:54:2b:77:91:ba:
92:5e:bd:9b:06:49:02:0b:7e:e8:5c:82:29:9e:6e:
26:11:30:93:93:7e:20:b2:d1:ef:64:ba:e9:37:a6:
94:ba:60:b1:e7:7c:21:78:52:6e:69:60:94:7b:07:
15:ad:f2:36:ff:f9:89:48:71:e0:90:e9:48:b5:a9:
9e:a0:8b:f6:4e:49:a9:50:76:bd:79:e7:69:a4:f4:
df:bd:e2:e9:aa:c6:a1:2b:3b:75:b1:52:f9:6d:ec:
b8:ae:71:cb:3e:d0:dc:fe:2b:e9:ea:64:80:fd:5b:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:E8:6F:E8:B7:DB:71:9A:CB:C4:51:66:E8:C4:F3:49:B8:DB:72
X509v3 Authority Key Identifier:
keyid:1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:e7:6d:23:3e:c2:99:d2:3e:68:ef:3d:d7:54:6d:8c:ab:ba:
85:91:a2:e6:2b:11:1c:55:06:0e:74:6e:ef:c6:f3:88:c8:13:
d1:59:cb:f3:76:97:f4:08:26:19:6d:89:bc:fb:39:a6:d9:e0:
1c:e2:90:b2:91:82:bd:73:95:88:4f:2e:b7:4d:0f:0b:df:12:
2d:87:3a:c7:6b:0c:d7:52:4f:8d:07:57:7d:e3:82:78:7a:1f:
07:3c:48:3e:6e:e3:00:ad:4f:2a:d2:77:bd:a8:1d:3f:88:91:
b9:48:31:ab:b5:2a:45:7c:d5:99:82:eb:62:b1:39:7c:36:b3:
5a:db:6d:64:f5:73:96:46:f3:03:0a:71:1d:13:8d:3a:9c:87:
a3:b0:33:72:76:e8:26:40:20:ef:d6:75:34:36:f7:d7:98:53:
1d:2d:7f:29:0d:44:2f:89:e0:4f:91:81:cb:60:19:79:71:8a:
a6:cf:e7:39:d7:0b:e7:98:9c:6d:43:47:73:3d:29:92:1c:17:
c4:de:ac:eb:b8:3a:d4:fd:7d:50:25:8d:3f:18:53:6f:89:78:
5e:d2:e2:c2:57:3c:30:95:a5:fb:0d:85:57:c8:69:e5:45:bf:
3b:42:c1:33:d4:86:1d:f6:86:53:b9:39:9a:4d:d9:48:3b:e4:
61:e4:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:34 2025 by rpki-client